$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa File: cffb2afc-1c5c-3086-b3a6-8048790da8db.roa (raw, json) Hash identifier: nqJ30cYD2viAjiPaUtYlmUeNfcIqRRkQRzEh7iJo9Gs= Subject key identifier: 00:BC:C5:6F:7B:B5:DA:FF:C3:44:00:9A:1C:D8:F9:44:7D:BE:37:F1 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584EB8473E8DCA10B04DE17C2080 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 40934 IP address blocks: 173.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:3e:8d:ca:10:b0:4d:e1:7c:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=855a0934-3641-4215-9531-99be929b95dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c8:13:88:03:be:f2:a7:30:3a:17:2a:a1:83: 4e:99:60:d3:fb:f2:d1:29:42:59:5a:6f:99:78:52: dc:50:c3:25:c6:1c:ab:6b:a7:9e:4e:60:71:43:8a: c4:e2:ea:1b:4a:a0:ee:51:3d:ff:87:94:0a:7b:4d: c6:bb:21:0b:20:77:9e:78:6a:fc:89:63:12:3c:90: 5a:b2:50:b8:71:05:1d:83:72:b5:75:f6:ae:00:e3: 29:8c:77:4a:62:ed:93:ff:4d:fc:c6:b9:b5:6a:76: 1e:27:f8:bc:c4:bb:11:b9:84:5f:57:f2:d5:14:7b: d1:2d:1f:c6:69:07:ce:ce:fc:00:22:3e:86:39:c9: cc:e1:e6:00:0d:cb:17:07:ba:d7:73:d7:b1:c0:35: bf:00:91:bb:61:f8:8c:2f:7c:f2:f4:28:94:77:64: b1:db:1e:9f:62:7c:9a:a5:bc:b5:ef:28:2f:27:34: c6:b6:22:4c:82:8e:4d:05:e2:27:00:4c:fb:fa:1b: 46:ef:85:19:16:6a:01:bd:0b:c2:e1:b6:d7:29:7a: 4b:16:d1:45:98:84:7b:e5:d4:25:5a:41:0f:fa:68: 3e:e5:f6:9e:29:b7:52:ce:67:a5:67:bb:5c:3e:15: 76:fa:0e:8a:fe:d6:4b:64:98:05:26:24:ea:72:35: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BC:C5:6F:7B:B5:DA:FF:C3:44:00:9A:1C:D8:F9:44:7D:BE:37:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 173.243.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:89:24:f7:e7:86:73:97:77:f8:06:19:2f:c3:36:06:05:e3: ed:c8:e2:00:38:29:a2:b5:c3:e3:92:99:a5:fd:0d:82:56:61: 3e:65:05:99:da:8f:c6:cd:2d:40:b7:35:06:78:98:88:61:db: d6:50:ff:fb:c0:a2:77:3b:4c:f7:65:4d:f0:ec:2d:62:31:13: 83:29:8c:95:96:97:82:34:2f:8a:05:1d:17:42:73:e2:a1:eb: ed:c4:6a:76:6e:04:79:fb:7f:eb:9c:38:7e:54:47:7c:f5:27: 88:a9:0d:86:7a:4b:81:ae:14:cb:25:37:9d:00:01:38:5c:00: ba:21:d5:b5:72:4f:45:d3:c1:12:4a:54:1e:ea:d4:14:25:27: fc:0b:4b:d1:a8:b0:7e:37:99:5b:34:76:74:ac:ac:8c:cb:40: 90:3a:e0:17:46:d6:4d:81:1c:d0:fa:ff:a5:a5:af:0f:61:8c: dc:65:0d:8e:f3:3b:53:a9:c3:2f:6b:76:63:4c:82:d5:71:ed: 0b:b7:70:33:31:1e:58:a6:8d:11:39:c8:e3:e4:60:f2:7f:f8: 2c:a8:38:53:42:f5:f9:73:18:82:e3:a7:c6:60:b1:88:26:5a: 2b:38:e0:71:79:f4:bf:cd:4e:91:44:0b:63:02:ec:18:78:6a: 47:1b:08:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64Rz6NyhCwTeF8IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ODU1YTA5MzQtMzY0MS00MjE1LTk1MzEtOTliZTkyOWI5NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMgTiAO+8qcwOhcqoYNOmWDT+/LRKUJZWm+Z eFLcUMMlxhyra6eeTmBxQ4rE4uobSqDuUT3/h5QKe03GuyELIHeeeGr8iWMSPJBa slC4cQUdg3K1dfauAOMpjHdKYu2T/038xrm1anYeJ/i8xLsRuYRfV/LVFHvRLR/G aQfOzvwAIj6GOcnM4eYADcsXB7rXc9exwDW/AJG7YfiML3zy9CiUd2Sx2x6fYnya pby17ygvJzTGtiJMgo5NBeInAEz7+htG74UZFmoBvQvC4bbXKXpLFtFFmIR75dQl WkEP+mg+5faeKbdSzmelZ7tcPhV2+g6K/tZLZJgFJiTqcjUdDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC8xW97tdr/w0QAmhzY+UR9vjfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvY2ZmYjJhZmMtMWM1Yy0z MDg2LWIzYTYtODA0ODc5MGRhOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaJJPfnhnOXd/gGGS/DNgYF4+3I4gA4KaK1w+OSmaX9DYJWYT5lBZna j8bNLUC3NQZ4mIhh29ZQ//vAonc7TPdlTfDsLWIxE4MpjJWWl4I0L4oFHRdCc+Kh 6+3EanZuBHn7f+ucOH5UR3z1J4ipDYZ6S4GuFMslN50AAThcALoh1bVyT0XTwRJK VB7q1BQlJ/wLS9GosH43mVs0dnSsrIzLQJA64BdG1k2BHND6/6Wlrw9hjNxlDY7z O1Opwy9rdmNMgtVx7Qu3cDMxHlimjRE5yOPkYPJ/+CyoOFNC9flzGILjp8ZgsYgm Wis44HF59L/NTpFEC2MC7Bh4akcbCJI= -----END CERTIFICATE-----Generated at Mon Sep 14 19:14:25 2026 by rpki-client